If you are a Small Business customer, find additional troubleshooting and learning resources at the Support for Small Business site.

A Microsoft Systems Management Server (SMS) deployment package is available that includes security update MS05-038. Security update MS05-038 applies to Microsoft Internet Explorer 6 with Service Pack 1 (SP1) when Internet Explorer 6 with SP1 is used with Microsoft Windows 2000 or with Microsoft Windows XP.

The SMS deployment package also includes a script that enables the SMS 2.0 Software Update Services (SUS) Feature Pack and the SMS 2003 Software Update feature to deploy the appropriate security update to Windows 2000-based computers and to Windows XP-based computers. This script does not install the security update on Microsoft Windows NT 4.0-based computers. Security update MS05-038 is not compatible with Windows NT 4.0.

You can download the SMS deployment package from the Microsoft Download Center. You must download a language-specific version of the SMS deployment package if you authorize security update MS05-038 for languages other than English, French, German, or Japanese. To use the SMS deployment package, specify the /q:a /r:n command-line options in the Distribute Software Updates Wizard.

SMS uses the Microsoft Baseline Security Analyzer (MBSA)
scanning tool. MBSA can detect computers that require the security update that
is documented in Microsoft security bulletin MS05-038. However, MBSA cannot
provide SMS with information about supported operating systems for this update.
For example, MBSA indicates that this update is compatible with Windows NT 4.0,
even though this update is not compatible with Windows NT 4.0. The SMS deployment package is designed to
prevent installation of this incompatible update on Windows NT 4.0. If you
install security update MS05-038 on Windows NT 4.0-based computers without using the specific SMS deployment package, installation failures will occur on
the client computers.

For more information about security update MS05-038, visit
the following Microsoft Web site:

To resolve this problem, Microsoft has released an SMS
deployment package to the Microsoft Download Center. The SMS deployment package
includes the following items:

The IE6.0sp1-KB883939-Windows-2000-XP-x86-ENU.exe
file

A script that detects the operating system on SMS client
computers and prevents installation on Windows NT 4.0

After security update MS05-038 is approved in the
Distribute Software Updates Wizard, SMS downloads the SMS deployment
package instead of the specified security update that is documented in
Microsoft security bulletin MS05-038.

Important If you authorize security update MS05-038 for languages other
than English, French, German, or Japanese, you must manually download the SMS
deployment package for the appropriate language. You must also manually
download the SMS deployment packages for the appropriate languages if the
following conditions are true:

You are using the English version of the security
catalog.

You are scanning French, German, or Japanese client
computers.

Download information

The
following file is available for download from the Microsoft Download
Center:

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Prerequisites

Deployment information

To use the SMS deployment package, use the /q:a
/r:n command-line options in the Distribute Software Updates
Wizard. The SMS deployment package contains a configuration file that has the
actual command-line options that are used for the security update. This file silently installs the
security update without restarting client computers. These command-line options
are part of the script logic in the SMS deployment package. These command-line
options cannot be changed.

Frequently asked questions

Q1: What is the difference between the security update that is included in the SMS deployment package and the security update that is documented in Microsoft security bulletin MS05-038?

A1: The security update that is included in the SMS
deployment package and the security update that is documented in Microsoft
security bulletin MS05-038 are the same. SMS wraps the actual security update MS05-038 by using the SMS
deployment package. However, the update that is run on the client computer is the
same update that is available for download from Microsoft
security bulletin
MS05-038.

Q2: Does the SMS deployment package support security update MS05-038 for other versions of Internet Explorer?

A2: No. The SMS deployment package contains a security update only for
Internet Explorer 6 SP1 when it is used with Windows 2000 or with Windows XP.
Security update MS05-038 for other versions of Internet Explorer can be
detected and deployed by using SMS. There is no requirement for a separate SMS
deployment package.

Q3: I have Internet Explorer 6 with SP1 running in a homogenous environment with only one type of operating system. For example, my SMS client computers run only Windows 2000. Must I use the SMS deployment package, or can I deploy the security update that is documented in Microsoft security bulletin MS05-038?

A3: You can use the SMS deployment package, or you can manually
download and deploy the specific operating system update that is documented in
Microsoft security bulletin MS05-038. You can use the Distribute Software Updates Wizard
to import the actual security update MS05-038 for deployment.